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August 31, 2018 


AND FIRST CLASS MAIL 
VIA EMAIL (IDTHEFT@OAG.STATE.MD.US) 

Office of the Attorney General 
Attn: Security Breach Notification 
200 St. Paul Place 
Baltimore, MD 21202 

Re: Incident Notification 

Dear Attorney General Frosh: 

I am writing on behalf of our client, Postemak Blankstein & Lund, LLP (“Postemak”), to 
notify you of a security incident involving one Maryland resident. 

On June 29, 2018, Postemak learned through a forensic investigation into a phishing 
incident, that an u nk nown individual had gained access to a Postemak employee’s email account. 
On July 30, 2018, Postemak learned the identities of the individuals whose personal information 
was in the employee’s email account and what information may have been affected. Although, to 
date, Postemak does not know if any sensitive personal information was accessed without 
permission, it is providing notification to potentially affected individuals out of air abundance of 
caution. The information that could have been accessed in the employee’s account includes the 
individual’s name and financial account and routing number for one Maryland resident. 

On August 31, 2018, Postemak will begin mailing written notifications to potentially 
affected individuals. These individuals include one Maryland resident who is being notified of 
the incident in writing in accordance with Md. Code Ann., Com. Law § 14-3504 in substantially 
the same form as the enclosed letter. 1 Postemak has provided a telephone number for potentially 
affected individuals to call with any questions they may have. 

On August 31, 2018, Postemak will also begin notifying third parties that provided 
Postemak with data relating to additional individuals whose information may have been affected 


1 This report does not waive Postemak’s objection that Maryland lacks personal jurisdiction regarding the company 
related to this matter. 
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by this incident. Postemak is offering to provide notification services, call center services, and 
required regulator notifications, on behalf of these t hir d parties. Postemak will also offer eligible 
individuals a complimentary one-year membership in credit mpnitoring and identity theft 
protection services through Experian. If any party accepts Postemak’s offer with respect to a 
Maryland resident, Postemak will submit a supplemental regulatory notice to this office. 

To help prevent something like this from happening in the future, Postemak has taken 
steps to enhance its existing network and email security, including providing continued training 
to their employees on data security and the dangers of p hi s hin g emails. 

Please do not hesitate to contact me if you have any questions regarding this matter. 


Sincerely, 


David E. Kitchen 
Partner 


Enclosure 


Fosternak 
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Return Mail Processing Center 
P.O, Box 6336 
Portland, OR 97228-6336 


August 31, 2018 


Dear 


Fosternak Blankstein & Lund LLP (“Fosternak' 1 ) understands the importance of protecting individuals' 
persona! information. We are writing to inform you that we recently identified and addressed a security incident 
that may have involved your information. This notice explains the incident, measures we have taken, and some 
steps you can take in response. 

On June 29, 2018, we learned through an ongoing forensic investigation into a phishing incident that 
an unauthorized party had obtained access to an email account belonging to a Fosternak attorney. Upon first 
l earning of the phishing incident, we immediately secured and enhanced security for the employee account, 
changed the account password, and commenced an internal investigation. We also engaged a professional 
forensic security firm to assist with the investigation. The investigation determined that an unauthorized person 
had accessed the employee email account, but the investigation was unable to determine the scope of 
information that may have been accessed or acquired. While we have no indication that your information has 
been misused, we are providing you this notice out of an abundance of caution so that you understand the nature 
of your information that was contained in the email account and can take steps to help protect yourself. The 
email account contained documents transmitted by debtors or lawyers involved in bankruptcy matters and 
which contained your name and a financial account number and routing number for account. 

We encourage you to remain vigilant by reviewing your account statements and free credit reports for 
any unauthorized activity. We recommend that you monitor your account statements for any unauthorized 
activity and report any suspected fraud to your banking institution and card issuer immediately. Card network 
rules generally provide that cardholders are not responsible for unauthorized charges that are reported promptly. 
The phone number to call is usually on the back of your payment card . Please see the pages that follow for 
additional steps you can take to protect your information. 

We apologize for any inconvenience caused by this incident. To help prevent this type of incident from 
happening again, we are taking significant steps to enhance our existing data security procedures and providing 
continued training to our employees on data security and the dangers of phishing emails. If you have questions, 
please call at 877-588-5667, Monday through Friday between 9:00 am and 9:00 pm Eastern Time. 

Sincerely, 

a 


Adam 1. Ruttenberg, Partner 
Fosternak Blankstein Sc Lund LLP 
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MORE INFORMATION ON WAYS TO PROTECT YOURSELF 


We recommend that you remain vigilant for incidents of fraud or identity theft by reviewing your account 
statements and free credit reports for any unauthorized activity. You may obtain a copy of your credit rep oil, 
free of charge, once every 12 months from each of the three nationwide credit reporting companies. To order 
your annual free credit report, please visit www.annualcreditreport, coin, or call toll free at 1-877-322- 
8228, Contact information for the three nationwide credit reporting companies is as follows: 

Equifax, PO Box 740241, Atlanta, GA 30374, www.eauifax.com . 1-800-685-1111 
Experian, PO Box 2002, Allen. TX 75013, www.experian.com , 1-888-397-3742 
TransUnion, PO Box 2000, Chester. PA 19016, www.transumen.eoun 1-800-916-8800 

If you believe you are the victim of identity theft or have reason to believe your personal information has been 
misused, you should immediately contact the Federal Trade Commission and/or the Attorney General’s office 
in your state. You can obtain information from these sources about steps an individual can take to avoid identity 
theft as well as information about fraud alerts and security freezes. You should also contact your local law 
enforcement authorities and file a police report. Obtain a copy of the police report In case you are asked to 
provide copies to creditors to correct your records. Contact information for the Federal Trade Commission is 
as follows: 

Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue, NW Washington, 
DC 20580,1 -877-XDTHEFT (438-4338), www.ftc.gov/idtheft 

If you are a resident of Connecticut, Maryland, or North Carolina you may contact and obtain information 
from your state attorney general at: 

Connecticut Attorney General's Office ; 55 Elm Street, Hartford, CT 06106, 1-860-808-5318, 
wwwxt.gov/ag 

Maryland Attorney General's Office, 200 St. Paul Place, Baltimore, MD 21202, 
www.oag.state.md.us , 1-888-743-0023 (toll free when calling within Maryland) 

(410) 576-6300 (for calls originating outside Maryland) 

North Carolina Attorney General's Office t 9001 Mail Service Center, Raleigh, NC 
27699, www. ncdQi.gov » 1-877-566-7226 

Fraud Alerts: There are two types of fraud alerts you can place on your credit report to put your creditors on 
notice that you may be a victim of fraud—an initial alert and an extended alert. You may ask that an initial fraud 
alert he placed on your credit report if you suspect you have been, or are about to be, a victim of identity theft. 
An initial fraud alert stays on your credit report for at least 90 days. You may have an extended alert placed on 
your credit report if you have already been a victim of identify theft with the appropriate documentary proof An 
extended fraud alert stays on your credit report for seven years. You can place a fraud alert on your credit report 
by contacting any of the three national credit reporting agencies. 

Credit Freezes: You may have the right to put a credit freeze, also known as a security freeze, on your credit 
file, so that no new credit can he opened in your name without the use of a PIN number that is issued to you 
when you initiate a freeze. A credit freeze is designed to prevent potential credit grantors from accessing your 
credit report without your consent. If you place a credit freeze, potential creditors and other third parties will not 
be able to get access to your credit report unless you temporarily lift the freeze. Therefore, using a credit freeze 
may delay your ability to obtain credit. In addition, you may incur fees to place, lift and/or remove a credit 
freeze. Credit freeze laws vary from state to state. The cost of placing, temporarily lifting, and removing a credit 
freeze also varies by state, generally $5 to $20 per action at each credit reporting company. Unlike a fraud alert, 
you must separately place a credit freeze on your credit file at each credit reporting company. Since the 
instructions for how f to establish a credit freeze differ from state to state, please contact the three major credit 
reporting companies as specified below to find out more information. 
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To place a security freeze on your credit report, you must send a written request to each of the three major 
reporting agencies by tegular, certified, or overnight mail at the addresses below; 

Equifax Security Freeze, PO Box 105788, Atlanta, GA 30348, www.equifax.coni 
Experian Security Freeze, PO Box 9554, Allen, TX 75013, www.experian.com 
Transition Security Freeze, PO Box 2000, Chester, PA 19016, www. tr ansunion.com 

In order to request a security freeze, you will need to provide the following information: 

L Your frill name (including middle Initial as well as Jn, Sr., II, III, etc.) 

1, Social Security number 

2, Date of birth 

3. If you have moved in the past five (5) years, provide the addresses where you have lived over the prior 
five years 

4. Proof of current address such as a current utility bill or telephone bill 

5, A legible photocopy of a government issued identification card (state driver's license or ID card, 
military identification, etc.) 

6. If you are a victim of identity theft, include a copy of the police report, investigative report, or complaint 
to a law enforcement agency concerning identity theft 

The credit reporting agencies have three (3) business days after receiving your request to place a security freeze 
on your credit report. The credit bureaus must also send written confirmation to you within five (5) business 
days and provide you with a unique personal identification number ('TIN") or password or both that can be 
used by you to authorize the removal or lifting of the security freeze. 

To lift the security freeze in order to allow a specific entity or individual access to your credit report, you must 
call or send a written request to the credit reporting agencies by mail and include proper identification (name, 
address, and Social Security number) and the PrN number or password provided to you when you placed the 
security freeze as well as the identity of those entities or individuals you would like to receive your credit report 
or the specific period of time you want the credit report avai lable. The credit reporting agencies have three (3) 
business days after receiving your request to lift the security freeze for those identified entities or for the 
specified period of time. 

To remove the security freeze, you must send a written request to each of the three credit bureaus by mail and 
include proper identification (name, address, and Social Security number) and the PIN number or password 
provided to you when you placed the security freeze. The credit bureaus have three (3) business days after 
receiving your request to remove the security freeze. 
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—-—- FOLD on this \lm and place in shipping pouch with bar coda and delivery address visible 

1. Fold the first printed page in half and use as the shipping label. 

2. Place the label in a waybill pouch and affix it to your shipment so that the barcode portion 
of the label can be read and scanned. 

3. Keep the second page as a receipt for your records. The receipt contains the terms and 
conditions of shipping and information useful for tracking your package. 


Legal Terms and Conditions 

Tendering packages by using this system constitutes your agreement to the service conditions for the transportation of your 
shipments as found in the applicable FedEx Service Guide, available upon request. FedEx will not be responsible for any claim 
in excess of the applicable declared value, whether the result of loss, damage, delay, nondelivery, misdelivery, or 
misinformation, unless you declare a higher value, pay an additional charge, document your actual loss and file a timely claim. 
Limitations found In the applicable FedEx Service Guide apply. Your right to recover from FedEx for any loss, including intrinsic 
value of the package, loss of sales, income interest, profit, attorney's fees, costs, and other forms of damage whether direct, 
incidental, consequential, or special is limited to the greater of 100 USD or the authorized declared value, Recovery cannot 
exceed actual documented loss. Maximum for items of extraordinary value is 500 USD, e.g. jewelry, precious metals, negotiable 
instruments and other items listed in our Service Guide. Written claims must be filed within strict time limits, see applicable 
FedEx Service Guide, FedEx will not be liable for loss or damage to prohibited items in any event or for your acts or omissions, 
including, without limitation, improper or insufficient packaging, securing, marking or addressing, or the acts or omissions of the 
recipient or anyone else with an interest in the package. See the applicable FedEx Service Guide for complete terms and 
conditions. To obtain information regarding how to file a claim or to obtain a Service Guide, please call 1-800-GG-FEDEX 
{t-800-463-3339), 


https://cloud.psship.com/index.php 


8/30/2018 















































